NVD

Id
71866  
Name
CVE-2004-1487  
Description
wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2005-04-27  
Modified Date
2017-07-10  
Seq
2004-1487  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
371533 71866 CVE-2004-1487 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755  View
371534 71866 CVE-2004-1487 20041209 wget: Arbitrary file overwriting/appending/creating and other vulnerabilities  View
371535 71866 CVE-2004-1487 oval:org.mitre.oval:def:11682  View
371536 71866 CVE-2004-1487 1012472  View
371537 71866 CVE-2004-1487 RHSA-2005:771  View
371538 71866 CVE-2004-1487 11871  View
371539 71866 CVE-2004-1487 USN-145-1  View
371540 71866 CVE-2004-1487 wget-file-overwrite(18420)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63180 JVNDB-2004-000522 wget の リダイレクションURLをフィルタリングする処理における任意のファイルが上書きされる脆弱性 ------------ CVE-2004-1487 9914 CVE-2004-1487 71866 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000522.html 2004-12-10 2007-04-01 View